IT Security & Privacy

New Zealand Faces Rising Privacy Risks as Regulator Pushes for a Modern Privacy Act

‍New Zealand’s privacy regulator is sounding the alarm as privacy complaints and serious breach notifications surge across the country. In its latest Annual Report, the Office of the Privacy Commissioner warned that New Zealanders’ rising anxiety about personal data isn’t just theoretical anymore, it reflects a real increase in harm.

UK Tightens Cyber Defenses with New Bill Targeting Critical Infrastructure & Supply Chains

After a bruising year of cyber incidents that exposed the fragility of the UK’s digital defenses, the government has presented its long-awaited Cyber Security and Resilience Bill to Parliament, a huge step intended to move the country from guidance to enforcement in its approach to cyber risk.

Washington Post Confirms Data Breach Linked to Oracle E-Business Hacks

The Washington Post has confirmed that it was among the organizations affected in a broader hacking campaign exploiting vulnerabilities in Oracle’s E-Business Suite, a set of corporate software tools widely used to manage HR systems, business operations, and sensitive internal data.

Australia’s Information Commissioner Highlights Progress on Privacy & Access Rights

Australia’s privacy and information rights regulator says it made meaningful strides in enforcement, transparency, and public trust over the past year, according to the Office of the Australian Information Commissioner’s (OAIC) newly released Annual Report for 2024–25.

Federal Review Finds Strengths & Weak Spots in Utility Cybersecurity Programs

The Federal Energy Regulatory Commission (FERC) has released an updated set of “Lessons Learned” from Commission-led audits of the Critical Infrastructure Protection (CIP) Reliability Standards, offering a clearer picture of where compliance programs are improving and where common gaps are still appearing across the electric sector.

Danish Businesses Push for a More Practical GDPR: Dialogue Opens Between Regulator & Industry

The Danish Data Protection Agency (Datatilsynet) and the Confederation of Danish Industry (DI) have opened a constructive dialogue on how to make GDPR compliance less of a bureaucratic burden and more of a workable reality for businesses.

Global Privacy Sweep Targets Children’s Online Safety

More than thirty privacy and data protection authorities around the world have launched a coordinated investigation into how websites and mobile apps used by children handle their personal data. The initiative is part of the 2025 Global Privacy Enforcement Network (GPEN) Sweep, running from November 3 to 7, 2025.